topic Re: Problem with Section access in App Development

Problem with Section access

ali_hijazi — Wed, 03 Mar 2021 16:04:37 GMT

Hello

we have Qlik Sense server latest version
on a dashboard we defined section access (some users have ADMIN access and others with USER access)
there is an expression: sum(Expected_Man_Days)
this expression gives zero when some users with USER access access the dashboard and this is wrong:
However if I remove the section access and I reload the dashboard and then on the UI I select the UserID of the user the expression gives a correct number

so the expression is not working fine when section access is applied

Re: Problem with Section access

manoranjan_d — Wed, 03 Mar 2021 16:20:32 GMT

Have you added any omit field in the section access?

Re: Problem with Section access

ali_hijazi — Wed, 03 Mar 2021 16:35:58 GMT

Yes some fields are omitted for some users but this particular user the omit is kept blank

So the omit is giving problems?

Re: Problem with Section access

manoranjan_d — Wed, 03 Mar 2021 17:00:06 GMT

So the omit is giving problems?

yes, only for admin only you pass it as blank.

example for omit

Section Access;
LOAD * INLINE [
ACCESS, USERID, PASSWORD, OMIT
ADMIN, ADMIN, ADMIN,
USER, USER1, U1, SALES
USER, USER2, U2, WAREHOUSE
USER, USER3, U3, EMPLOYEES
USER, USER4, U4, SALES
USER, USER4, U4, WAREHOUSE
USER, USER5, U5, *
];
Section Application;
LOAD * INLINE [
SALES, WAREHOUSE, EMPLOYEES, ORDERS
1, 2, 3, 4
];
In this example, the field OMIT has been added as part of Section Access.
USER1 will not be able to see the field SALES, USER2 will not be able to see field
WAREHOUSE and USER3 will not see field EMPLOYEES.
USER4 has been added twice to the solution since we want to OMIT two fields for this
user, SALES and WAREHOUSE.
USER5 has a “*” added which means that all listed fields in OMIT will be unavailable.
USER5 will not be able to see fields SALES, WAREHOUSE and EMPLOYEES.

Re: Problem with Section access

ali_hijazi — Wed, 03 Mar 2021 17:48:42 GMT

So if a user doesn't see a field f1 and there is a measure related to f1 then the sum of that measure would be zero?

Re: Problem with Section access

manoranjan_d — Wed, 03 Mar 2021 18:07:45 GMT

So if a user doesn't see a field f1 and there is a measure related to f1 then the sum of that measure would be zero?

Yes, it will be zero or null value

Re: Problem with Section access

ali_hijazi — Thu, 04 Mar 2021 10:15:39 GMT

today I removed the OMIT from section access and still that user sees zero as the result of the expression while admins see the result correctly

kindly advise

Re: Problem with Section access

manoranjan_d — Thu, 04 Mar 2021 11:36:44 GMT

Can you share your section access script

Re: Problem with Section access

ali_hijazi — Thu, 04 Mar 2021 12:09:28 GMT

section Access;

/*
project managers
*/
security:
LOAD
ACCESS,
USERID,
SECURITY_KEY
FROM [$(vG.LoadPath)SECURITY_PRJ_MANAGER.qvd]
(qvd);

/*
admins / super users
*/
Concatenate(security)
Load
ACCESS,
USERID
from [$(vG.LoadPath)SECURITY_ADMIN_LIST.qvd](qvd);
/*
FPNA Users
*/
Concatenate(security)
LOAD
USERID,
ACCESS,
SECURITY_KEY
FROM [$(vG.LoadPath)SECURITY_NON_ADMIN_FPNA_PROJECT_TP2.qvd]
(qvd);
Concatenate(security)
LOAD
USERID,
ACCESS,
SECURITY_KEY
FROM [$(vG.LoadPath)SECURITY_NON_ADMIN_FPNA_RESOURCE.qvd]
(qvd);
/*
bu list
*/
Concatenate(security)
LOAD
USERID,
ACCESS,
SECURITY_KEY
FROM [$(vG.LoadPath)SECURITY_NON_ADMIN_BU_PROJECT.qvd]
(qvd);
Concatenate(security)
Load
USERID,
ACCESS,
SECURITY_KEY
FROM [$(vG.LoadPath)SECURITY_NON_ADMIN_BU_RESOURCE.qvd]
(qvd);
/**************************************************************************************************************/

/*
omit list for prj managers
*/
LOAD
USERID,
SubField(OMIT,',') AS OMIT
FROM [$(vG.LoadPath)SECURITY_PRJ_MANAGER_OMIT_LIST.qvd]
(qvd);
/**************************************************************************************************************/

Re: Problem with Section access

ali_hijazi — Thu, 04 Mar 2021 12:10:24 GMT

can you join on Teams?
this way we make a quick call and I show you how the expression is behaving?

Re: Problem with Section access

manoranjan_d — Thu, 04 Mar 2021 15:41:08 GMT

Hi ,

Pass your script between

section access ;

Section application;

You also need to pass one more admin as below

ACCESS,USEID

ADMIN,INTERNAL\SA_SCHEDULER,

Note: when you are implementing section access it has to be upper case like above example i shared.

And same field should also be in upper in the data model or script

Re: Problem with Section access

ali_hijazi — Thu, 04 Mar 2021 15:47:13 GMT

yes this is all done
the values in the table are all upper case and the security_key column contains numbers

and yes the SA_SCHEDULER is already part of the admin list
btw I've been working on Qlik for 10 years now
been working on Qlikview for long time and 3 years on Qlik Sense and this is the first time I encounter such a weird behavior

Re: Problem with Section access

manoranjan_d — Thu, 04 Mar 2021 15:54:33 GMT

other than SA_SChCHEDULER, any thing you checked with qlik admin side to add in the section access

example

ADMIN,INTERNAL\SA_API,

QAserviceaccount.

if again user is having zero for filed then try to pass blank value for omit and reduction.

Re: Problem with Section access

ali_hijazi — Thu, 04 Mar 2021 16:18:50 GMT

I totally removed the OMIT part
and this user has values in the reduction
if I remove the section access command and I select the that user from USERID the expression gives correct number but when I apply the section access the expression returns zero for that user

for admins it is working just fine

Re: Problem with Section access

manoranjan_d — Thu, 04 Mar 2021 16:46:37 GMT

Reduction will give the user to access only the data for specified data, where as OMIT will allow not to access the particular field value

Re: Problem with Section access

ali_hijazi — Thu, 04 Mar 2021 16:53:26 GMT

I know but the behavior is weird
at first I thought the omit is making issues
but I removed the OMIT part from the script
I kept the reduction
but if I remove the section access line
then in the UI I can select the user from the USERID field and the expression gives me a number which is correct
but when I put back the section access line of code and I ask that user to open the dashboard after I publish it

the expression gives him zero

this is the weird behavior

Re: Problem with Section access

manoranjan_d — Thu, 04 Mar 2021 16:58:20 GMT

yes its weird , better try this as last one

remove the particular userid and run the section access and then

manually add the particular userid details and then run it again with section access.

this is just a try only.